chore(sdk): bump blue-js-sdk to 2.7.2, drop runtime RPC patch

SDK 2.7.2 ships an audited 12-endpoint RPC pool (rpc.sentinel.co excluded,
all the alternates we were injecting are now first-class). Plan Manager's
runtime patch in lib/chain.js (removeRpcEndpoint/addRpcEndpoint at module
load) is now redundant and removed. Refresh signing-RPC list in
lib/constants.js to match the in-sync set.

Verified: import('blue-js-sdk') → 401 exports clean; live rpcQueryBalance
through the default pool reaches a real Sentinel node.

PR upstream: Sentinel-Bluebuilder/blue-js-sdk#31

Author: Sentinel-Autonomybuilder

lib/chain.js

@@ -9,6 +9,7 @@ import { TxRaw, TxBody } from 'cosmjs-types/cosmos/tx/v1beta1/tx';
 import { Int53 } from '@cosmjs/math';
 import { LCD_ENDPOINTS, RPC, GAS_PRICE_STR, CHAIN_ID } from './constants.js';
 // SDK: P2P price (CoinGecko) + RPC query functions (protobuf transport, ~912x faster than LCD REST)
+// SDK 2.7.2 ships a consensus-audited RPC pool — no runtime patching needed.
 import {
   getDvpnPrice as _sdkGetDvpnPrice,
   createRpcQueryClientWithFallback,
@@ -30,6 +31,7 @@ import {
   rpcQueryFeeGrantsIssued,
   rpcQueryProvider,
 } from 'blue-js-sdk';
+
 import { createRegistry } from './protobuf.js';
 import { isSequenceError, extractExpectedSeq } from './errors.js';
 import { cacheInvalidate } from 'blue-js-sdk';

lib/constants.js

@@ -9,26 +9,34 @@ export const CHAIN_ID = 'sentinelhub-2';
 
 // ─── Signing RPC Failover ────────────────────────────────────────────────────
 // Order matters — the signing client tries them top-down and caches the first
-// reachable one. These are the public RPC endpoints currently observed up
-// in `plans rpc-providers` scans; if all fail we fall back to RPC_PROVIDERS.
+// reachable one. Verified in-sync at chain tip and serving correct balances
+// on 2026-04-30 against sent1uav3z70yynp4jnt39c6pg3d6ujw78m52v2h7gs (10k P2P).
+// rpc.sentinel.co is intentionally absent — it was lagging ~22k blocks and
+// causing wallet endpoints to return stale 0 balances.
 export const SIGNING_RPC_URLS = [
   'https://sentinel-rpc.publicnode.com:443',
   'https://rpc-sentinel.busurnode.com:443',
-  'https://sentinel-rpc.polkachu.com:443',
+  'https://rpc.sentinel.suchnode.net:443',
   'https://rpc.sentinel.quokkastake.io:443',
-  'https://rpc.sentinel.co:443',
-  'https://sentinel-rpc.lavenderfive.com:443',
-  'https://rpc.mathnodes.com:443',
-  'https://sentinel-rpc.badgerbite.io:443',
+  'https://rpc.sentinel.chaintools.tech:443',
+  'https://rpc.sentinel.validatus.com:443',
+  'https://rpc.sentineldao.com:443',
+  'https://rpc-sentinel.chainvibes.com:443',
+  'https://rpc.trinitystake.io:443',
+  'https://rpc.dvpn.roomit.xyz:443',
 ];
 export const SIGNING_RPC_CONNECT_TIMEOUT_MS = 5000;
 
 // ─── LCD Failover Endpoints ──────────────────────────────────────────────────
+// Order: in-sync providers first. lcd.sentinel.co was returning stale data on
+// 2026-04-30 (0 balance for a funded address) so it sits last as a courtesy.
 export const LCD_ENDPOINTS = [
-  'https://lcd.sentinel.co',
+  'https://api-sentinel.busurnode.com',
+  'https://api.sentinel.suchnode.net',
   'https://api.sentinel.quokkastake.io',
   'https://sentinel-api.polkachu.com',
   'https://sentinel.api.trivium.network:1317',
+  'https://lcd.sentinel.co',
 ];
 
 // ─── V3 Protobuf Type URLs ──────────────────────────────────────────────────

package-lock.json

@@ -53,7 +53,7 @@
     "@privy-io/server-auth": "^1.32.5",
     "@scure/bip32": "^2.0.1",
     "@scure/bip39": "^2.0.1",
-    "blue-js-sdk": "^2.7.0",
+    "blue-js-sdk": "^2.7.2",
     "dotenv": "^17.4.2",
     "express": "^4.18.2",
     "qrcode": "^1.5.4"